$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2b017cb-f59d-31e7-963a-b5c78501616d.roa File: c2b017cb-f59d-31e7-963a-b5c78501616d.roa (raw, json) Hash identifier: pZK2fEBbgHQ+EOrsabZU1rMs40nbByysPVCRB3M84Hs= Subject key identifier: F6:63:BC:DA:30:BC:46:ED:C1:44:E5:B2:90:9E:F7:1C:19:1B:C0:1E Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F2EED09649E495D4556757480 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2b017cb-f59d-31e7-963a-b5c78501616d.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:09:64:9e:49:5d:45:56:75:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=d0d58e22-3364-45bf-8e2b-19cbc2d1d62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:59:7a:3e:20:55:40:20:97:c9:2b:3f:22: d5:38:cd:86:fb:02:1c:ce:91:90:8b:05:0a:12:aa: 14:b1:dc:69:e0:94:d9:55:76:26:d9:a7:a4:57:39: e1:c7:b3:14:4a:5a:b0:f0:b0:e5:89:27:46:e3:f7: ce:69:12:1a:eb:71:e8:ba:da:79:d1:86:ee:5c:01: d7:e0:60:77:f6:00:99:53:50:5e:9d:30:30:d4:57: e0:0e:0f:63:98:7d:c6:f4:cc:5b:62:b4:e2:22:8d: 08:28:75:10:5b:a3:ec:03:38:e9:2d:33:f4:21:0b: bf:d3:65:88:26:60:b6:bd:a6:d5:5f:ba:b2:09:e7: b6:a0:ec:40:18:94:93:6d:b0:5d:34:d9:38:e7:8c: aa:98:e9:49:78:9f:4b:07:7b:95:d4:29:c2:dd:b4: 28:f9:eb:b4:53:79:35:30:c6:fd:00:3f:1d:db:78: 19:ad:b3:ff:5b:94:1b:64:49:69:40:36:39:37:f8: 7a:61:04:8a:af:c0:18:23:9d:96:5e:8d:7f:71:11: ff:bc:28:eb:2b:38:6d:cb:09:55:cc:bb:22:fa:b7: 30:40:7f:72:cd:26:c6:d6:b9:aa:7a:4d:e5:d2:f7: 09:83:c9:27:bc:05:d2:ba:b0:37:3e:46:dd:ab:fb: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:63:BC:DA:30:BC:46:ED:C1:44:E5:B2:90:9E:F7:1C:19:1B:C0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2b017cb-f59d-31e7-963a-b5c78501616d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d5:47:bc:58:ad:a4:83:07:d8:e9:c2:47:4e:1b:ef:f5:e5: 1f:68:97:06:87:b4:5f:3d:fe:f4:c8:ea:28:a3:50:a5:c9:05: d2:6d:d8:87:5e:86:cb:5b:85:70:38:0b:34:99:c0:a9:31:1b: df:71:43:68:71:0c:5c:ab:06:bb:8e:13:08:2d:c5:14:87:2b: ca:7c:6c:4a:63:ea:33:3c:f4:6d:5f:bc:3c:52:c5:51:18:f4: dc:7a:3c:61:36:f4:4e:c3:c9:7c:d3:3a:06:a3:88:4c:c4:7f: c0:b0:a3:cb:e2:d0:8a:17:49:2e:40:7a:7f:5b:05:85:18:db: 07:12:fa:dd:09:58:be:29:b3:32:37:83:6f:0e:55:4f:bb:a9: 6b:30:c4:99:28:b6:da:87:30:23:03:ac:a6:00:ad:80:45:a6: 26:c9:ff:ac:d4:4e:50:cb:af:7c:c3:c9:d3:93:68:56:ab:4d: e8:d9:7e:bf:84:98:82:0d:3a:af:36:03:a2:18:d2:96:82:b3: fa:a8:1f:01:98:08:91:fe:6a:e7:5e:83:43:c2:3e:e8:50:5b: ab:b1:89:cc:cc:a1:00:eb:3c:a7:86:3f:22:2a:ce:ae:a4:55: 47:9e:b9:50:e8:c4:91:11:14:33:64:8c:9b:d1:ed:93:6e:ba: 2f:29:e9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7QlknkldRVZ1dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDBkNThlMjItMzM2NC00NWJmLThlMmItMTljYmMyZDFkNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL5Zej4gVUAgl8krPyLVOM2G+wIczpGQiwUK EqoUsdxp4JTZVXYm2aekVznhx7MUSlqw8LDliSdG4/fOaRIa63Houtp50YbuXAHX 4GB39gCZU1BenTAw1FfgDg9jmH3G9MxbYrTiIo0IKHUQW6PsAzjpLTP0IQu/02WI JmC2vabVX7qyCee2oOxAGJSTbbBdNNk454yqmOlJeJ9LB3uV1CnC3bQo+eu0U3k1 MMb9AD8d23gZrbP/W5QbZElpQDY5N/h6YQSKr8AYI52WXo1/cRH/vCjrKzhtywlV zLsi+rcwQH9yzSbG1rmqek3l0vcJg8knvAXSurA3Pkbdq/vAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZjvNowvEbtwUTlspCe9xwZG8AeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYzJiMDE3Y2ItZjU5ZC0z MWU3LTk2M2EtYjVjNzg1MDE2MTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHVR7xYraSDB9jpwkdOG+/15R9olwaHtF89/vTI6iijUKXJBdJt2Ide hstbhXA4CzSZwKkxG99xQ2hxDFyrBruOEwgtxRSHK8p8bEpj6jM89G1fvDxSxVEY 9Nx6PGE29E7DyXzTOgajiEzEf8Cwo8vi0IoXSS5Aen9bBYUY2wcS+t0JWL4pszI3 g28OVU+7qWswxJkottqHMCMDrKYArYBFpibJ/6zUTlDLr3zDydOTaFarTejZfr+E mIINOq82A6IY0paCs/qoHwGYCJH+audeg0PCPuhQW6uxiczMoQDrPKeGPyIqzq6k VUeeuVDoxJERFDNkjJvR7ZNuui8p6V8= -----END CERTIFICATE-----Generated at Sun Oct 4 00:07:27 2026 by rpki-client